Information clause

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as "GDPR"), we inform you that:

DATA CONTROLLER

The controller of personal data processed within the online store www.thecodestore.pl (hereinafter referred to as the "Online Store") is THE CODE Sp. z o. o. with its registered office in Warsaw 02-995, ul. Komfortowa 10/2, registered in the register of entrepreneurs maintained by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the KRS number 0001164311, Tax Identification Number (NIP) 9512618328, REGON 541288210, with the share capital of PLN 50,000 (hereinafter referred to as fifty thousand zlotys and zero groszy);

Contact with the Controller is possible in writing – to the address THE CODE Sp. z o. o., ul. Komfortowa 10/2, 02-995 Warsaw or electronically – to the e-mail address info@thecodestore.pl .

PURPOSE AND BASIS FOR PROCESSING PERSONAL DATA

Your data will be processed for the purpose of:

making transactions within the Store – pursuant to Article 6(1)(b) of the GDPR, i.e. processing is necessary for the performance of a contract or to take action at the request of the data subject before concluding a contract;
marketing of the Controller's own services and products - pursuant to Article 6(1)(f) of the GDPR, i.e. on the basis of the legitimate interest pursued by the Controller, which is direct marketing of its products and services;
conducting marketing and promotional activities – based on a separate consent (Article 6, paragraph 1, letter a of the GDPR),
establishing, pursuing or defending against any claims between you and the Controller – pursuant to Article 6(1)(f) of the GDPR, i.e. on the basis of the legitimate interest pursued by the Controller, which is the possibility of pursuing claims.
sending commercial information by electronic means in accordance with Article 10 paragraph 2 of the Act on the provision of services by electronic means of 18 July 2002 (consolidated text: Journal of Laws of 2024, item 1513) – based on a separately granted consent,
using telecommunications terminal equipment and automated calling systems for direct marketing purposes in accordance with Article 398 of the Act of 12 July 2024 - Electronic Communications Law (Journal of Laws of 2024, item 1221, as amended) - based on shared consent;

CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Your personal data may be disclosed to the following entities: employees and associates of the Controller, IT service providers, entities providing advisory and legal services.

Your personal data may be made available to entities and bodies authorized to process such data under the law.

The Administrator does not intend to transfer your personal data to countries outside the European Economic Area or to international organisations.

PERSONAL DATA STORAGE PERIOD

Your personal data will be processed until you withdraw your consent or object to the processing of your data (which will also occur as a result of termination of the contract for the provision of electronic services consisting in sending the newsletter) – in cases where your personal data are processed on the basis of a separate consent to send the newsletter or conduct marketing activities or on the basis referred to in Article 6 paragraph 1 letter e or f of the GDPR, including for direct marketing purposes.

YOUR RIGHTS

Providing your data is voluntary, but necessary to complete transactions within the Store. Failure to provide your personal data will prevent you from creating an account in the Store or completing transactions within the Store. This does not apply to data processing for commercial and marketing purposes, which is only performed with voluntary consent, regardless of the transactions within the Store.

Your data may be processed in the form of analytical, sales and marketing profiling in order to tailor materials sent by the Administrator to you. needs and interests and to make measurements that will allow the Administrator to improve the services it provides. Binding decisions are not automated;

It belongs to you the right to request from the Administrator access to your personal data, their rectification, deletion, restriction of processing or their transfer;

To the extent that the basis for processing your personal data is consent, they have Country the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To the extent that the basis for the processing of your personal data is the legitimate interest of the Controller, you have the right to object to the processing of your personal data.

In order to exercise the above rights, please contact the Administrator using the contact details provided above.

IN If you believe that the processing of your personal data by the Controller violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

More information on the principles of personal data processing is available in the Privacy Policy available in the Regulations and Clauses section.